Eugene Smiley on 2 Nov 2005 02:22:24 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Recovery 2.5GB of deleted files [RESOLVED]


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Christopher Shanahan wrote:

> foremost, foremost, foremost
> Don't reinvent the wheel.
>
>
> As for TCT, you'll want TSK (The Sleuthkit), together with the
> Autopsy Forensic Browser and foremost. Brian Carrier took TCT and
> continued to develop it. It is now TSK.

Well, after spending a week on this. I found I did something rather
silly. I was looking for a specific file (unrelated to the jpeg
"loss"). I was using FSView in Konqueror and I found the "deleted"
directory in another directory. I've been saved by a simple 'mv'!

There are several reasons for admiting this.

1) I thought I'd searched every directory before embarking on this
little recovery foray, but obviously my judgement was clouded and
didn't see it.
2) I wanted to report on the success or failure of the software
mentioned, but alas the solution came from a different direction.

For anyone searching the archives, I apologive, but hopefully the
solutions mentioned help you.


-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3

iQA/AwUBQ2gidukD7QKn7f0vEQLnxgCgiVaHcQt/VAE+NVE9ovSSAmVXTmoAoNfb
lXcoQaDxROcWSvdfbv+ef2wu
=Zwls
-----END PGP SIGNATURE-----
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug